Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
File:                     330092B238160780852731102A871D6304465F70.mft (raw, json)
Hash identifier:          E6tON3s10M8lniZRgEZkh3JDR+XkrEkMYXZ+JIY68mE=
Subject key identifier:   00:EA:49:CC:D9:A0:82:19:7A:EA:69:92:E1:63:EE:AD:4E:BB:45:E8
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       4DEB31709864CB10551C19992A62DBCCE9821FBF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 00:18:50 +0000
Manifest this update:     Wed 13 May 2026 00:13:50 +0000
Manifest next update:     Thu 14 May 2026 00:19:50 +0000
Files and hashes:         1: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: HpkVwWqEXIjN3YEAY1A1C8iTWhjH8FC+NyTxqq1d2LI=)
                          2: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: /vvzo2s8vyegzc8avpsATW+wv8ripOvn0xDZkpDyRyo=)
                          3: 330092B238160780852731102A871D6304465F70.crl (hash: LSM95loyCLPiKgoXsh7CIC45Jth7GMkwGJe3amFbPY8=)
                          4: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: frK8PZbh3KFjoO/nYY+Eo/5swXQNC1Cp6kW9KPTWIaE=)
                          5: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: HJzfn1RAcp4KQQSREVoxhT55QfVBdfZXOSmjHed/yCk=)
                          6: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: j+TaQjlpliKWuOR+ri5IrN7rmZzVKtlRC0yuzCbqi8M=)
                          7: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: BPV+6AVtXTtCqmAeTgWPqzztODjS6FnhMhNhFeIQf6s=)
                          8: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: fvMMfrS6mYlNF9rFiUBs/HRENLIoPVlg2GbOLNt+atE=)
                          9: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: sPNvpeDzhWn+6hid5VgHhdrKErvd5aUmBzSDcwGzfnk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:eb:31:70:98:64:cb:10:55:1c:19:99:2a:62:db:cc:e9:82:1f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: May 13 00:13:50 2026 GMT
            Not After : May 14 00:19:50 2026 GMT
        Subject: CN=00EA49CCD9A082197AEA6992E163EEAD4EBB45E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:66:4e:b6:8e:7e:b3:2c:54:6d:77:ca:39:
                    33:a9:a2:c2:04:ee:75:cc:17:28:84:65:3a:ca:e0:
                    cd:96:18:63:09:44:60:a1:8e:d5:ce:d7:fa:44:10:
                    73:bb:a9:19:9e:45:e7:4a:69:26:e7:1d:16:7a:d0:
                    22:18:ea:67:a5:84:11:e4:6c:2b:ac:81:34:89:cb:
                    28:4a:70:ef:33:62:c5:eb:d8:cb:c3:4e:20:f2:35:
                    ed:17:2c:bc:44:92:29:52:6c:49:b3:30:5e:03:f9:
                    30:2d:77:74:46:50:82:7f:0a:59:e0:11:af:ad:2b:
                    fb:7b:5b:f1:18:57:9c:92:3c:db:0f:81:c3:0a:0e:
                    2a:ce:42:74:f1:39:63:2c:23:44:19:1d:15:61:c8:
                    a2:8a:d9:87:7d:36:90:1d:30:3f:08:a3:58:88:c1:
                    f4:c6:4a:55:d2:da:ab:72:9c:d5:8a:8f:f8:66:b9:
                    da:ea:30:e1:69:b0:73:e2:d4:da:a4:df:db:b5:ca:
                    5c:4b:2a:83:d7:93:3c:8c:65:2d:1b:af:41:85:d0:
                    77:dc:0b:b5:2d:5b:55:56:42:bc:bf:6b:7e:7a:f4:
                    c3:c2:29:7c:ae:eb:f6:26:c3:30:4f:86:3c:bd:c8:
                    8d:38:3f:4a:35:a6:2d:23:7c:f6:35:80:fc:94:16:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EA:49:CC:D9:A0:82:19:7A:EA:69:92:E1:63:EE:AD:4E:BB:45:E8
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:af:b9:6e:b6:7c:63:38:59:32:65:e0:65:db:de:70:c0:
         70:50:df:93:dc:7e:a8:66:22:93:e5:6c:38:08:03:94:84:33:
         64:9a:72:87:8f:6a:56:ca:fa:9c:ab:6d:95:f0:8b:61:25:b7:
         61:fe:81:f9:4e:c1:ba:2a:12:2f:b7:41:2d:cc:00:f5:bb:15:
         f7:35:e7:cd:78:59:fb:b6:ce:1b:7d:6b:8c:47:b8:53:62:3d:
         8d:d3:e4:a2:11:a2:9b:9b:41:c8:fc:ff:2f:a7:0b:6b:4d:fb:
         d0:d9:4a:90:e0:8f:6d:46:03:00:9e:b2:30:a2:47:e3:bf:48:
         81:a6:e9:7c:64:83:43:62:79:77:ea:86:3a:18:ba:c5:26:43:
         a2:8a:a5:ec:ef:a3:80:c8:9d:2f:e0:64:39:1b:2e:78:ec:ab:
         d5:ae:b8:e9:ba:ab:66:67:69:ac:e8:3c:2e:1a:ce:19:af:89:
         bf:fa:3f:05:e1:78:4a:7c:de:3b:a1:a4:ad:70:e1:d3:2c:10:
         4f:08:05:fd:f6:38:8f:05:f6:cc:ed:50:75:e0:67:83:9e:b2:
         cc:05:dd:72:59:8b:c4:34:14:dd:83:6f:5d:c7:fb:a9:00:3a:
         82:51:3b:51:f7:ac:d7:17:3e:22:ba:2c:6e:6a:d0:22:f2:9e:
         77:a4:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:49 2026 by rpki-client